Questrade

Questrade Skill

Interact with a Questrade brokerage account and Canadian/US market data via the Questrade REST API.

Setup

1. Activate API Access

Log in to Questrade → App Hub → API Centre → Activate API. Generate a manual authorization token (this is your initial refresh token, valid for 7 days).

2. Store Credentials

Option A — environment variables (recommended):

export QUESTRADE_REFRESH_TOKEN="paste-your-token-here"
export QUESTRADE_PRACTICE="false"    # "true" for a practice account
export QUESTRADE_READ_ONLY="true"    # "true" to block order placement/cancellation

Option B — credentials file (~/.openclaw/credentials/questrade.json):

{
  "refreshToken": "paste-your-token-here",
  "practice": false,
  "readOnly": true
}

Important: Questrade refresh tokens rotate — every time the token is used to obtain a new access token, Questrade issues a new refresh token. This script automatically saves the new refresh token back to the credentials file, so you only need to paste the initial token once.

3. Install Dependencies

pip install -r requirements.txt

Or manually:

pip install requests

Quick Reference

Server Time

python3 scripts/questrade_cli.py time

Accounts

python3 scripts/questrade_cli.py accounts

Balances

python3 scripts/questrade_cli.py balances 12345678

Positions

python3 scripts/questrade_cli.py positions 12345678

Orders

# Open orders (default)
python3 scripts/questrade_cli.py orders 12345678

# All orders in a date range
python3 scripts/questrade_cli.py orders 12345678 --state All --start 2026-01-01 --end 2026-03-01

# Closed orders
python3 scripts/questrade_cli.py orders 12345678 --state Closed

Order Detail

python3 scripts/questrade_cli.py order-detail 12345678 987654321

Executions

python3 scripts/questrade_cli.py executions 12345678
python3 scripts/questrade_cli.py executions 12345678 --start 2026-01-01 --end 2026-02-28

Account Activities

# Max 30-day window; --end defaults to today if omitted
python3 scripts/questrade_cli.py activities 12345678 --start 2026-02-01
python3 scripts/questrade_cli.py activities 12345678 --start 2026-02-01 --end 2026-02-28

Symbol Search

# Search by ticker prefix
python3 scripts/questrade_cli.py symbol-search SHOP

# Search by company name
python3 scripts/questrade_cli.py symbol-search "Royal Bank"

Note: Questrade market data endpoints use integer symbol IDs, not ticker strings. Always run symbol-search first to get the correct ID before calling quote or candles.

Symbol Info

# Full metadata for a symbol (by Questrade ID)
python3 scripts/questrade_cli.py symbol-info 8049

Level 1 Quotes

# Single symbol
python3 scripts/questrade_cli.py quote 8049

# Multiple symbols (comma-separated IDs)
python3 scripts/questrade_cli.py quote 8049,38738,45340

Historical Candles (OHLCV)

# Daily candles for the past month
python3 scripts/questrade_cli.py candles 8049 --start 2026-02-01

# Hourly candles for a specific range
python3 scripts/questrade_cli.py candles 8049 --start 2026-01-01 --end 2026-02-01 --interval OneHour

# Available intervals:
# OneMinute, TwoMinutes, ThreeMinutes, FourMinutes, FiveMinutes,
# TenMinutes, FifteenMinutes, TwentyMinutes, HalfHour,
# OneHour, TwoHours, FourHours, OneDay, OneWeek, OneMonth, OneYear

Markets

python3 scripts/questrade_cli.py markets

Place Order (partner API access required)

# Market order
python3 scripts/questrade_cli.py order buy 12345678 8049 10 Market

# Limit order
python3 scripts/questrade_cli.py order buy 12345678 8049 10 Limit --limit-price 145.50

# Stop-limit order
python3 scripts/questrade_cli.py order sell 12345678 8049 5 StopLimit --stop-price 140.00 --limit-price 139.50

# Skip confirmation prompts
python3 scripts/questrade_cli.py order buy 12345678 8049 10 Market --force

Order Guardrails:

1. Live quote fetch — retrieves current bid/ask before submitting
2. Price sanity check — warns if buy limit > ask or sell limit < bid
3. Order summary — shows notional cost and requires y/n confirmation
4. Use --force to skip all prompts (automated use only)

Note: Order placement and cancellation require Questrade partner API access. Personal API tokens are read-only (GET requests only).

Cancel Order

python3 scripts/questrade_cli.py cancel-order 12345678 987654321

Workflow: Finding a Symbol and Getting a Quote

Because Questrade quotes use integer IDs rather than tickers, the typical two-step flow is:

# Step 1: Find the symbol ID
python3 scripts/questrade_cli.py symbol-search AAPL

# Step 2: Use the ID from the output
python3 scripts/questrade_cli.py quote 8049

Script Location

All commands use: scripts/questrade_cli.py (relative to this skill directory)

API Reference

See references/api.md for full endpoint documentation and response schemas.

Known Limitations

• Level 1 quotes and candles (quote, candles) may return 403 out of allowed OAuth scopes if your Questrade account does not have a market data subscription or the token was not generated with market data scope enabled. Account data commands (accounts, balances, positions, orders, executions, activities) work with all personal tokens.
• Activities endpoint has a maximum window of 30 days — always provide both --start and --end. If --end is omitted it defaults to today.

Safety Notes

• Personal API tokens cannot place trades. Questrade restricts order placement and cancellation (POST/DELETE /accounts/{id}/orders) to partner-level API access only. Attempting either with a personal token returns 403 Forbidden.
• The order and cancel-order commands are included for completeness but will not work unless you have Questrade partner API access.
• The refresh token rotates on every use; do not share the credentials file.
• Access tokens expire in ~30 minutes; the script caches and refreshes them automatically.